CWE-295

1,454 vulnerabilities with CWE-295

CVE-2025-33142 MEDIUM

IBM WebSphere App Server <9.0 - Info Disclosure

CVSS 5.3

CVE-2025-0309 MEDIUM

Netskope Client - Privilege Escalation

CVE-2025-2183 MEDIUM

Palo Alto GlobalProtect - Auth Bypass

CVE-2025-54809 HIGH

F5 Access for Android 3.1.0-3.1.1 - Improper Certificate Validation

CVSS 7.4

CVE-2025-8393 HIGH

Dreamehome iOS app < 2.3.4 and Android app < 2.1.8.8 - Improper Certificate Validation

CVSS 7.3

CVE-2025-20215 MEDIUM

Cisco Webex Meetings - Privilege Escalation

CVSS 5.4

CVE-2025-48393 MEDIUM

Eaton G4 PDU < 3.5.0 - Man-in-the-Middle via Insecure Firmware Upgrade Certificate Validation

CVSS 5.7

CVE-2025-2028 MEDIUM

Check Point Log Server - Improper Certificate Validation

CVSS 6.5

CVE-2025-54607 HIGH

HarmonyOS - Improper Certificate Validation in ArkWeb Module

CVSS 7.7

CVE-2025-44964 LOW

BlueStacks v5.20 - Man-in-the-Middle via SSL Certificate Validation Bypass

CVSS 3.9

CVE-2025-8476 HIGH

Alpine iLX-507 Firmware - Unauthenticated Arbitrary Code Execution via TIDAL Certificate Validation Bypass

CVSS 8.0

CVE-2025-6037 MEDIUM

HashiCorp Vault < 1.20.1, 1.19.7, 1.18.12, 1.16.23 - Improper Certificate Validation in TLS Certificate Auth Method

CVSS 6.8

CVE-2025-36005 MEDIUM

IBM MQ Operator 2.0.0-2.0.29, 3.2.0-3.2.13, 3.5.1 - Improper Certificate Validation

CVSS 5.9

CVE-2025-7395 CRITICAL

wolfSSL 5.6.4-5.8.0 - Improper Certificate Validation via WOLFSSL_SYS_CA_CERTS and WOLFSSL_APPLE_NATIVE_CERT_VALIDATION

CVE-2025-30024 MEDIUM

Axis Device Manager <= 5.32.137 - Man-in-the-Middle Attack

CVSS 6.8

CVE-2025-46788 HIGH

Zoom Workplace for Linux <6.4.13 - Info Disclosure

CVSS 7.4

CVE-2025-32989 MEDIUM

GnuTLS - Heap-Buffer-Overread in Certificate Transparency SCT Extension Parsing

CVSS 5.3

CVE-2025-35983 MEDIUM

Controller 7000 <9.30.250624a - Privilege Escalation

CVSS 6.5

CVE-2025-48802 MEDIUM

Microsoft Windows SMB - Certificate Validation Spoofing

CVSS 6.5

CVE-2025-7095 LOW

Comodo Internet Security Premium 12.3.4.8162 - Improper Certificate Validation in Update Handler

CVSS 3.7

CVE-2025-34066 HIGH

AVTECH - Improper Certificate Validation

CVE-2025-29331 CRITICAL

Mhsanaei 3x-ui < 2.5.3 - Improper Certificate Validation

CVSS 9.8

CVE-2025-6032 HIGH

Podman - Improper Certificate Validation in podman machine init

CVSS 8.3

CVE-2025-6433 CRITICAL

Firefox < 140.0 - Improper Certificate Validation via WebAuthn Challenge

CVSS 9.8

CVE-2025-39205 MEDIUM

MicroSCADA X SYS600 10.3-10.7 - Improper Certificate Validation in IEC 61850 TLS Protocol

CVSS 6.5